CVE-2026-3223

Summary

Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.

Affected Software

VendorProductVersion RangeStatus
GoogleWeb Designer0 < 14.2.2.0affected

Weaknesses

  • CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: total

References